Version 1.4. Effective date October 24, 2026
Effective date October 24, 2026. BioWellth, Inc. ("BioWellth", "we") operates biowellth.ai, a wellness platform that helps you understand your blood test results and related wellness information. This policy describes what we collect, why, where it goes, and the choices you have. BioWellth is a wellness and educational service. It does not diagnose, treat, cure, or prevent any disease.
Account information such as your name, email address, and date of birth. Waitlist information if you join our waitlist on our website, meaning your email address, the campaign tags in the link that brought you to our site, the website that referred you, and, only if you choose to tell us, the city you live in. Wellness information you choose to provide, including uploaded blood test reports, cycle and life stage information, dietary preferences, supplements, diagnosed conditions, symptoms you tell us about, medicines you take regularly, hormonal contraception or hormone therapy, and notes you add for context. Information generated for you, including transcribed results, wellness interpretations, scores, and trends. Sana conversations, meaning your questions to our AI companion and its responses. Basic technical information needed to run the service, such as login and security records.
To transcribe and interpret your reports against functional wellness ranges. To show your results, trends, and wellness plans over time. To answer your questions through Sana when you choose to use it. To keep your account secure and the service working. If you join our waitlist, we use your email address to confirm your signup and to invite you to early access, the campaign tags and referring website to understand which links and sites bring people to the waitlist, and your city, if you give it, to plan where early access opens first. We do not use waitlist information for any other purpose. To meet our legal obligations. We do not use your health information for advertising. We do not sell your health information.
Report interpretation is performed with Anthropic, whose Claude API processes your uploaded report together with the profile context needed to read it accurately for you. That context is limited to these categories. Your age, cycle and life stage information, dietary pattern, supplements, any conditions, symptoms and medicines you have told us about, hormonal contraception or hormone therapy, the circumstances of your blood draw you tell us about (fasting, recent illness, stress and hard exercise), and any context notes you have added. Anthropic processes this primarily on infrastructure in the United States.
Sana runs on Microsoft Azure AI Foundry. When you use Sana, your questions and BioWellth information relevant to your question, including your results and the health details you have shared with us (conditions, symptoms, medicines, supplements, hormonal contraception or hormone therapy, cycle and period details, and any notes you add), may be processed by Microsoft through Azure AI Foundry to generate a response. Sana conversations are stored by Microsoft until you delete your Sana history or delete your account. Sana processing may occur in Microsoft data center regions globally.
Sana remembers between conversations. After a conversation ends, an automated process reads it and updates a short health profile for you, covering things like the concerns, conditions, allergies, medications, goals, and recurring symptoms you have mentioned, along with how you prefer Sana to talk with you. This profile is generated by an AI model on Microsoft Azure, stored with your account, and read by Sana at the start of each new conversation so she does not ask you the same things twice, and kept while your account is active. It is not shared with anyone else. Deleting your Sana history deletes this profile. Deleting your account deletes it too.
Our AI service providers do not use your information to train their general purpose AI models or for their own independent commercial purposes. They may process information as necessary to provide the services, maintain security, prevent abuse, enforce their usage policies, and comply with law.
Microsoft operates automated abuse monitoring systems for Azure AI services. In limited circumstances, prompts or responses may be retained for abuse detection and may be reviewed by authorized personnel. This processing is separate from model training and is used for security and abuse prevention.
We use Resend to send transactional account emails, such as account confirmation, password reset, and sign-in emails, and waitlist emails, such as the welcome email when you join our waitlist and your invitation when early access opens. Resend receives your email address, your display name if you have an account, and the contents of the email needed to deliver it, including for people on our waitlist who do not have an account. Resend may use Amazon Web Services/Amazon SES as its delivery infrastructure.
Our waitlist form was previously hosted by Typeform. Typeform received the answers given in that form, which could include your name, email address, phone number, age range and city, how you track your health, symptoms and health experiences you chose to describe, how you heard about us, and any community code, together with the campaign tags in the link that brought you to it. Responses submitted through Typeform before October 24, 2026 are kept in Typeform and used only to invite people to early access.
We use Sentry for client side error monitoring, so that we can detect and diagnose faults in the website. Sentry receives the type of error, the technical stack trace, your browser and operating system, the address of the page you were on with any query string removed, a random identifier for your browser that is not linked to your account, and a short trail of your recent activity in the page that is redacted before it is sent. Sentry does not receive your name, your email address, your biomarker values, your report identifiers, or the names of files you upload. Sentry does not store your IP address. If an error report would contain a report identifier, it is reduced to a record that an error happened before anything leaves your browser. We do not use session replay, performance tracing, or logging with Sentry. Sentry stores this information in the European Union.
Your account and wellness information, and the waitlist information of people who join our waitlist on our website, including people who do not have an account, is stored with Supabase in Mumbai, India. AI processing occurs with the providers and in the locations described in section 3. This means some of your information is processed outside India and outside the United States, as described above.
You can use BioWellth without Sana. Sana asks for your separate consent the first time you use it, and you can withdraw that consent at any time in your settings. Withdrawing Sana consent stops Sana and stops further processing of your Sana history. You can separately delete your Sana conversation history, which deletes the stored conversations at Microsoft and our copies. You can delete individual reports. You can delete your entire account. If you join our waitlist, you can remove yourself at any time with the link in any waitlist email or by writing to us, and that deletes your waitlist information and stops waitlist emails to you. You can also reach us at support@mybiowellth.com for any of these requests.
We delete waitlist information from our website signup 12 months after you join the waitlist, or earlier when you are invited to early access or create an account, whichever comes first.
When you delete your account, we delete your information from our active systems promptly. Our AI providers then delete their copies on their own schedules. Anthropic deletes report processing inputs and outputs up to 30 days after processing. Microsoft retains Sana related content for up to 30 days for abuse monitoring. Content flagged by a provider's safety systems may be retained longer under that provider's policy, for security, abuse prevention, or legal compliance. Residual copies may persist briefly in secure, access restricted backups until they are overwritten in the normal cycle, and our database backups are overwritten on a rolling basis of about seven days. Backups do not include your uploaded report files, which are deleted immediately and are not recoverable from backup.
BioWellth is available to adults 18 and over. We ask for your date of birth to confirm you are 18 or older and to read your results accurately for your age. Accounts identified as under 18 are refused and their signup records are deleted promptly.
We do not use your identifiable health information to improve our products. Any analysis we perform for improvement uses aggregated or de identified information under our internal de identification standard, which prohibits re identification.
We and our service providers may disclose information when required by law, legal process, or a lawful governmental request.
If BioWellth is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy's protections and applicable law. Any successor will be required to honor materially equivalent protections for your information. Nothing in this section permits the sale of your health information.
For users in India, we process personal data consistent with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. You have the rights described in that law, including notice, consent, withdrawal, and erasure, exercised through the controls in section 5 or by contacting us.
We will update this policy when our practices change, and the current version will always be available on our site. Questions and requests go to support@mybiowellth.com.